Lucene search
+L

4082 matches found

VulnCheck KEV
VulnCheck KEV
added 2020/03/23 12:0 a.m.4 views

VulnCheck KEV: CVE-2020-1027

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions...

7.8CVSS7.4AI score0.04547EPSS
SaveExploits2References1
OSV
OSV
added 2020/03/12 4:15 p.m.5 views

CVE-2020-0799

An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka 'Windows Kernel Elevation of Privilege Vulnerability'...

7.8CVSS7.1AI score0.00853EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/12 4:15 p.m.17 views

Privilege escalation

An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka 'Windows Kernel Elevation of Privilege Vulnerability'...

7.2CVSS7.4AI score0.00853EPSS
SaveExploits0References1Affected Software4
CNVD
CNVD
added 2020/03/12 12:0 a.m.2 views

Microsoft Windows Kernel Privilege Elevation Vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation.Windows Kernel is one of the Windows kernels. An elevation of privilege vulnerability exists in Microsoft Windows Kernel. The vulnerability can be exploited to gain access to privileged registry entrie...

7.8CVSS7.3AI score0.00853EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/11 12:0 a.m.5 views

Microsoft Win32k Component Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for use on personal devices.Microsoft Windows Server is a set of server operating systems.win32k is the kernel part of one of the Windows subsystems...

7.8CVSS7.1AI score0.02244EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.8 views

The vulnerability of the Windows operating system’s kernel, related to errors in memory object handling, allows attackers to exploit their privileges.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.01367EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.9 views

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00962EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.6 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

5.5CVSS5.8AI score0.01454EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.8 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.01367EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.8 views

The vulnerability of the Windows operating system’s kernel, related to errors in memory object handling, allows attackers to exploit their privileges.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.01277EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.10 views

The vulnerability of the Windows operating system’s kernel, related to errors in memory object handling, allows attackers to exploit their privileges.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.2605EPSS
SaveExploits8References4
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.8 views

The vulnerability of the Windows operating system’s kernel, related to errors in memory object handling, allows attackers to exploit their privileges.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.01367EPSS
SaveExploits0References3
zdt
zdt
added 2020/02/15 12:0 a.m.142 views

Windows Kernel - Information Disclosure Vulnerability

PoC for the SWAPGS attack CVE-2019-1125 This holds the sources for the SWAPGS attack PoC publicly shown at Black Hat USA, 2019. Contents leakgsbkva - variant 1 look for random values in kernel memory; limited to PE kernel image header leakgsbkvat - variant 2 extract random values from kernel...

5.6CVSS7.3AI score0.04521EPSS
SaveExploits4
Talos Blog
Talos Blog
added 2020/02/13 8:22 a.m.163 views

Microsoft Patch Tuesday — Feb. 2020: Vulnerability disclosures and Snort coverage

By Jon Munshaw. Microsoft released its monthly security update today, disclosing vulnerabilities across many of its products and releasing corresponding updates. This month's Patch Tuesday covers 98 vulnerabilities, 12 of which are considered critical and 84 that are considered important. There a...

9.3CVSS0.9AI score0.99965EPSS
SaveExploits73
ATTACKERKB
ATTACKERKB
added 2020/02/13 12:0 a.m.8 views

Windows kernel NtUserScrollDC memory corruption

The attached testcases crashes Windows 7 x86 with Special Pool enabled on win32k. The crash occurs while accessing unmapped memory. The bogus address is returned by a call to FastWindowFromDC. This is likely to be a freed window object. Recent assessments: busterb at May 09, 2019 5:57pm UTC...

5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/02/13 12:0 a.m.94 views

Kernel-mode type-confusion vulnerability via NtUserSetInformationThread/UserThreadCsrApiPort

The Windows Kernel is subject to a kernel-mode type-confusion vulnerability inside win32k!NtUserSetInformationThread due to referencing a user-mode handle via ObReferenceObjectByHandle with a NULL type specified it should instead be using LpcPortObjectType to protect against this vulnerability...

2.2AI score
SaveExploits0References1
CNVD
CNVD
added 2020/02/12 12:0 a.m.8 views

Microsoft Win32k Component Elevation of Privilege Vulnerability (CNVD-2020-10155)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for use on personal devices.Microsoft Windows Server is a set of server operating systems. win32k is the kernel part of one of the Windows subsystems, ...

7.8CVSS7.2AI score0.00962EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/11 10:15 p.m.1 views

CVE-2020-0736

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'...

5.5CVSS6.1AI score0.01454EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/11 10:15 p.m.4 views

CVE-2020-0691

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723,...

7.8CVSS7.1AI score0.00962EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/11 10:15 p.m.3 views

CVE-2020-0670

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668, CVE-2020-0669, CVE-2020-0671, CVE-2020-0672...

7.8CVSS7.1AI score0.01367EPSS
SaveExploits0References1
Rows per page
Query Builder